Privacy policy
Updated October 2, 2026
WYGO helps your group organize a gift exchange. This page explains what information we use, who can see it and how you can manage it.
What we use
We store your account email, the name you choose for each exchange, your answers, participation records, exchange settings and draw assignments. Our authentication provider also processes technical information needed for sign-in and abuse prevention.
Who can see it
Participants can see their recipient and that person's answers once results are available. The organizer sees the participant list and completion status; the dashboard does not show everyone's answers or assignments. Invitations give access to the exchange's general information and allow people to join while it is open. Share them only with your group.
Questions your group chooses
The organizer chooses the questions. Do not ask for passwords, identity documents, bank details, health information or other sensitive information that is not needed for the exchange. If a question makes you uncomfortable, talk to your organizer before answering.
Feedback and ratings
If you send feedback, we store your message, its type, your optional rating and contact email, the page, language and basic browser information. Feedback is available in a private administration panel, not published as a review. Do not include passwords, private answers or draw results.
Providers, cookies and preferences
WYGO uses Supabase for authentication and database storage, and Vercel for hosting. Providers may process data in other countries depending on the service settings. Necessary session cookies keep you signed in; page JavaScript cannot read them. Supabase manages passwords. Your browser saves your language preference. WYGO has no advertising or commercial analytics.
Leaving and deleting data
Before the draw, you can leave and delete your answers. The organizer can remove participants before the draw or delete the entire exchange. Deleting an exchange removes its records, answers and assignments from the active database. Finishing or archiving it does not delete the data.
What deletion does not include
Deleting an exchange does not delete your sign-in account or other exchanges. Provider backups and technical logs follow their own retention schedules. We cannot remove information someone has copied outside WYGO. Access controls reduce unauthorized access, but no system can guarantee absolute security.
Policy updates
If our data practices change, we will update this page and its date. We will not reuse your answers for incompatible new purposes without the required information and permissions.
Questions about your data?
For exchange data, contact your organizer. For account questions or privacy requests, contact WYGO.